Section 4(4)(b) in The Information Technology (Information Security Practices and Procedures for Protected System) Rules, 2018
(b)In addition, National Critical Information Infrastructure Protection Centre's latest Standard Operating Procedure (SOP) on Incident Response shall be strictly followed in case of cyber incident(s) on "Protected System".